Approach for the unified login goal

[Xpirix]

The suggestion here is to allow unified login accross our websites by allowing authentication using a Google or GitHub account.
We already have this feature on the changelog website https://changelog.qgis.org/en/accounts/login/ so I think we can adopt the same approach as already done there.

The suggested library here is django-allauth: https://codeberg.org/allauth/django-allauth. Here are the detailed process

• Install and set up django-allauth
• Configure Social Providers: Enable Google+ API and get the Client ID and Secret, Create a new OAuth and get the ClientID and Client Secret on GitHub
• Configure these keys in the settings and add them into the environment file
• Update the login page: Add a button for Google and GitHub sign in
• Handle Email Verification
• Link existing account to the new social login method
  • When an existing user logs in with a social provide, we need check if their email address already exists in your database. If it does, you can link the social account to their existing account instead of creating a new one (should we even create a new account when it doesn't exist? See also my question below).
  • Enable the SOCIALACCOUNT_EMAIL_AUTHENTICATION setting to allow users to log in with their social account email if it matches an existing account. This setting ensures that if a user logs in with a social provider and their email matches an existing account, they will be logged into that account instead of creating a new one.
  • For existing users who are already logged in, provide an option to link their social account to their existing account.

Should we add an option to register new users? The current situation for the QGIS plugins and QGIS Hub is that the users must have an OSGeo account to be able to log in.

[timlinux]

Would be good to add Apple

[Xpirix]

From @timlinux

We can implement the registration but with an additional step that asks the staff to provide the new user permission.